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DETAILED ACTION 

This is a first Office action on the merits of this application. Claims 1-27 are 
presented for examination. 

Claim Rejections - 35 USC § 102 

The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
applicant for patent, except that an international application filed under the treaty defined in section 
351(a) shall have the effects for purposes of this subsection of an application filed in the United States 
only if the international application designated the United States and was published under Article 21(2) 
of such treaty in the English language. 

1. Claims 1-3, 5, 6, 11-14, 18-21, and 23 are rejected under 35 U.S.C. 102(e)as 
being anticipated by Kidder et al. (U.S. Patent No. 6,445,774, hereinafter "Kidder"). 

In considering claim 1, Kidder discloses a method for handling notification 
messages generated within a communication network ("alarms"), the method 
comprising the steps of: 

receiving information corresponding to a plurality of notification messages ("alarm 
reports"), each of the plurality of notification messages corresponding to a specific 
network device and a status within the communication network (col. 7, lines 10-17); 

providing a storage device ("network monitor 404") having data arranged such 
that pre-established managed correlation orbs (i.e. "events") within the storage device 
are identified, the pre-established managed correlation orbs for determining a relational 
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correspondence between the received information and an associated notification 
message (col. 8, lines 9-13, "the network monitor may then select one or more of these 
alarm reports to create an event," wherein "an event is a grouping of alarm reports to 
facilitate their processing"); 

determining at least one specific pre-established managed correlation orb to 
which the received information and the associated notification message is related (i.e. a 
certain type of event); and storing the received information and the associated 
notification message in the at least one specific pre-established managed correlation 
orb identified by the determining step (col. 8, lines 59-67, "the workflow LCA 412 
creates an event report record in event database 415"). 

In considering claim 2, Kidder further discloses defining a plurality of unique 
instances within each pre-established managed correlation orb (col. 11, lines 56-66, 
wherein the events can be further broken down by geographic region). 

In considering claim 3, Kidder further discloses the step of determining at least 
one unique instance within the pre-established managed correlation orbs to which the 
received information and the associated notification message are related and storing 
the received information within the at least one unique instances (col. 1 1 , lines 56-66, 
wherein the table stores the events related by geographic region as a group). 
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In considering claim 5 r Kidder further discloses that the status within the 
communication network includes one of a network device, a protocol, a function, a 
circuit, a program, or a chassis (col. 1, lines 26-35, describing network devices). 

In considering claim 6, Kidder further discloses: 

receiving one of the plurality of notification messages ("alarm reports"), 

entering the storage device with the one of the plurality of notification messages 
(col. 8, lines 59-67, "the workflow LCA 412 creates an event report record in event 
database 415"); and 

retrieving rules for processing the one of the plurality of notification messages, 
the rules being stored in the storage device (col. 1 1 , lines 56-66, wherein one rule is to 
group events by geographic location). 

In considering claim 1 1 , Kidder further discloses a system for processing 
notification messages ("alarms"), the system comprising: 

a processor, the processor configured to accept an input, the input including a 
plurality of notification messages ("alarm reports"), each of the plurality of notification 
messages corresponding to a network device and a status within a communication 
network (col. 7, lines 10-17); 

a plurality of memory elements, the plurality of memory elements comprising a 
plurality of pre-established managed correlation orbs and capable of storing the plurality 
of notification messages (col. 8, lines 9-13, 59-67, "the network monitor may then select 
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one or more of these alarm reports to create an event," wherein "an event is a grouping 
of alarm reports to facilitate their processing," such that memory within a database is set 
aside to store the grouped messages); and 

a storage device in communication with the processor, the storage device 
configured to store a set of rules, the set of rules designed to correlate the plurality of 
notification messages with the plurality of pre-established managed correlation orbs, 
wherein the correlation includes storing each of the plurality of notification messages in 
at least one specific of the plurality of pre-established managed correlation orbs to 
which the set of rules designate the notification message corresponds (col. 8, lines 9- 
13, 59-67, wherein the network monitor correlates the alarms with the groupings, and 
stores the alarms as part of the groupings in the database). 

In considering claim 12, Kidder further discloses that the plurality of pre- 
established managed correlation orbs is designated with regard to structural, logical, 
associational or functional correspondence with the communication network (col. 8, 
lines 5-14, wherein the alarms are grouped according to the alarms' associational 
correspondence with each other). 

In considering claim 13, Kidder further discloses that each pre-established 
managed correlation orb further includes unique instances (i.e. each event is a unique 
instance). 
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In considering claim 14, Kidder further discloses a plurality of processing rules for 
processing each of the plurality of notification messages (col. 8, lines 6-14, wherein 
grouping the events into events constitutes processing rules). 

In considering claim 18, claim 18 presents a system for performing the same 
method as claim 1, and is thus rejected for the same reasons. 

In considering claim 19, claim 19 presents a system for performing the same 
method as claim 5, and is thus rejected for the same reasons. 

In considering claims 20-21 , claims 20-21 present a system for performing the 
same method as claims 2-3, and are thus rejected for the same reasons. 

In considering claim 23, claim 23 presents a system for performing the same 
method as claim 6, and is thus rejected for the same reasons. 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 
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2. Claims 4, 7-10, 15-17, 22, and 24-27 are rejected under 35 U.S.C. 103(a) as 
being unpatentable over Kidder, in view of Roytman et al. (U.S. Patent No. 6,356,282, 
hereinafter "Roytman"). 

In considering claim 4, Kidder further discloses that the grouped notification 
message is represented by an integer (col. 12, lines 60-64, "the network monitor's 
display may include the event report number associated with the alarm report or provide 
some other indicator which associated the event report with the alarm report"). 
However, Kidder does not explicitly state that the number is used to index to a 
notification message definition stored in the storage device. Nonetheless, indexing an 
alarm numerical value to an alarm textual definition in a network monitoring system is 
well known, as evidenced by Roytman. In a similar art, Roytman discloses a network 
monitoring system for viewing alarms, and for grouping alarms into different categories 
for ease of viewing (col. 7, lines 23-45), wherein the alarm can be coded as a numeric 
value or an associated textual ID (col. 8, lines 31-34), such that the ID or numeric value 
would necessarily be mapped to a stored textual definition. Given this knowledge, a 
person having ordinary skill in the art would have readily recognized the desirability and 
advantages of using a numerical value to represent the alarms as taught by Roytman in 
the system taught by Kidder, because these numerical values will take up less space on 
the monitor's computer screen, and thus will allow more information to be viewed on the 
screen. Given this knowledge, it would have been obvious to represent the alarm and 
event messages taught by Kidder as numerical values, as taught by Roytman. 
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In considering claims 7 and 15, Kidder further discloses that the grouped 
notification message is represented textually ("event report number... or some other 
indicator," col. 12, lines 60-64). However, Kidder does not explicitly disclose that the 
textual representation corresponds to a message textual definition being stored in the 
storage device. Nonetheless, indexing a notification message to a message textual 
definition corresponding to the notification message is well known, as evidenced by 
Roytman. In a similar art, Roytman discloses a network monitoring system for viewing 
alarms, and for grouping alarms into different categories for ease of viewing (col. 7, 
lines 23-45), wherein the alarm can be coded as a textual ID (col. 8, lines 31-34), such 
that the ID or value would necessarily be mapped to a stored textual definition. Given 
this knowledge, a person having ordinary skill in the art would have readily recognized 
the desirability and advantages of using a textual ID to represent the alarms as taught 
by Roytman in the system taught by Kidder, because these ID values will take up less 
space on the monitor's computer screen than an entire definition, and thus will allow 
more information to be viewed on the screen. Given this knowledge, it would have been 
obvious to represent the alarm and event messages taught by Kidder as textual IDs, as 
taught by Roytman. 

In considering claim 8, Roytman further discloses that the notification message 
textual definition comprises at last a probable cause ("probable cause," col. 8, lines 33- 
34). 
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In considering claim 9, Kidder further discloses retrieving topographical data 
stored in the storage device corresponding to the one of the plurality of notification 
messages; and 

creating a first graphical diagram of the communication network, wherein a 
segment of the communication network diagram corresponding to the information 
conveyed by the one of the plurality of notification messages is indicated (col. 7, lines 
15-20, "iconic map;" Fig. 5). 

In considering claim 10, Kidder further discloses creating a second graphical 
diagram of the indicated segment of the network diagram, wherein the second graphical 
diagram includes a plurality of graphical depictions of both a plurality of network devices 
present in a portion of the communication network that corresponds to the indicated 
segment of the communication network graphical diagram and a plurality of connections 
therebetween (Fig. 5). 

In considering claim 1 6, Kidder further discloses that the status within the 
communication network includes one of a network device, a protocol, a function, a 
circuit, a program, or a chassis (col. 1, lines 26-35, describing network devices). 

In considering claim 17, Kidder further discloses producing a graphical diagram 
of a segment of the communication network to which the notification message textual 
definition applies (col. 7, lines 15-20, "iconic map;" Fig. 5). 
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In considering claim 22, claim 22 presents a system for performing the same 
method as claims 4, and is thus rejected for the same reasons. 

In considering claims 24-27, claims 24-27 present a system for performing the 
same method as claims 7-10, and are thus rejected for the same reasons. 

Conclusion 

The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Bradley Edelman whose telephone number is 703-306- 
3041 . The examiner can normally be reached from 9 a.m. to 5 p.m. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Glen Burgess can be reached on 703-305-4792. The fax phone number for 
the organization where this application or proceeding is assigned is 703-872-9306. 



Application/Control Number: 09/873,684 Page 1 1 

Art Unit: 2153 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 
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